[kenchan_da_man]

HI, Iam getting a blue screen then reboot after physical memory dump. This happens whenever I watch a .avi file or if I'm watching a streaming site like youtube, it even happened when i was on a myspace page yesterday. It plays the video but when ever i close the media player or website down I get the Blue Screen.

The Blue screen says Bad Pool Header and the main number at the bottom is 0x00000019 (0x00000021 0xD18BE000 0x00070808 0xFFFE0176)

In the event viewer under errors it says "Unable to initialize the security package kerberos for server side authentication. the data field contains the error number " It is an httpevent and has an ID of 15016.

There are also some updats that I cannot install, KB951698. not sure if this has anything to do with the kerberos thing.

I just installed vista 3 days ago from a dell upgrade dvd and put SP1 in yesterday. I have no idea what to do. There was another problem with sonic before but I found a patch for that, that problem gave me the same blue screen (I think, both had 0x00000019 though unsure if the drvmcdb.sys problem had same bracketed numbers).

Here the log from the debugger WINDBG

BugCheck 19, {21, 8608b000, 70808, ffff}
*** WARNING: Unable to verify timestamp for sthda.sys
*** ERROR: Module load completed but symbols could not be loaded for sthda.sys
Probably caused by : sthda.sys ( sthda+148ec )
Followup: MachineOwner
---------
1: kd> !analyze -v
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****
BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 00000021, the data following the pool block being freed is corrupt. Typically this means the consumer (call stack ) has overrun the block.
Arg2: 8608b000, The pool pointer being freed.
Arg3: 00070808, The number of bytes allocated for the pool block.
Arg4: 0000ffff, The corrupted value found following the pool block.
Debugging Details:
------------------

BUGCHECK_STR: 0x19_21
POOL_ADDRESS: GetPointerFromAddress: unable to read from 81b71868
Unable to read MiSystemVaType memory at 81b51420
8608b000
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: audiodg.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 81b2800c to 81b07163
STACK_TEXT:
99910abc 81b2800c 00000019 00000021 8608b000 nt!KeBugCheckEx+0x1e
99910b34 81b273ae 8608b000 00000000 99910bcc nt!ExFreePoolWithTag+0x17f
99910b44 903378ec 8608b000 8703a9b0 903379e7 nt!ExFreePool+0xf
WARNING: Stack unwind information not available. Following frames may be wrong.
99910bcc 903511e8 00000001 8716c3f8 86e69da8 sthda+0x148ec
99910be0 90358180 853ee018 99910c04 90362bb0 portcls!CUnknown::NonDelegatingRelease+0x24
99910bec 90362bb0 853ee008 870df008 8608a4a4 portcls!CPortPinWaveCyclic::Release+0x11
99910c04 8fb38299 00000000 85127348 99910c30 portcls!DispatchClose+0x5d
99910c14 903278fb 8716c340 8608a410 8608a420 ks!DispatchClose+0x34
99910c30 81af6053 8716c340 8608a410 850dfbf8 sthda+0x48fb
99910c48 81c59124 00000000 00000000 850dfbe0 nt!IofCallDriver+0x63
99910c8c 81c7e5e7 850dfbf8 81a0e110 850dfbe0 nt!IopDeleteFile+0x178
99910ca8 81a8b89d 850dfbf8 00000000 8720d818 nt!ObpRemoveObjectRoutine+0x13d
99910cd0 81c574da 97ef1b80 8720d818 0000011c nt!ObfDereferenceObject+0xa1
99910d14 81c576d0 97ef1b80 98759238 879b2b98 nt!ObpCloseHandleTableEntry+0x24e
99910d44 81c578f5 879b2b98 8720d801 8720d801 nt!ObpCloseHandle+0x73
99910d58 81a91a7a 0000011c 01a9f18c 77cd9a94 nt!NtClose+0x20
99910d58 77cd9a94 0000011c 01a9f18c 77cd9a94 nt!KiFastCallEntry+0x12a
01a9f18c 00000000 00000000 00000000 00000000 0x77cd9a94

STACK_COMMAND: kb
FOLLOWUP_IP:
sthda+148ec
903378ec ?? ???
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: sthda+148ec
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: sthda
IMAGE_NAME: sthda.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 42af5d28
FAILURE_BUCKET_ID: 0x19_21_sthda+148ec
BUCKET_ID: 0x19_21_sthda+148ec
Followup: MachineOwner
---------

This seems to say that it is not kerberos but a file called audiodg.exe. Iam completely confused. any help would be much appreciated.